Under Construction

Overview

Windows

Create Certificate

Create the certificate in an administrator PowerShell:

Here the minimum required parameters have been used:

New-SelfSignedCertificate -DnsName "win-cutd9v4hrbs.lianja.local", "win-cutd9v4hrbs" \
-CertStoreLocation "cert:\LocalMachine\My"

See here for full details on the PowerShell New-SelfSignedCertificate cmdlet

Then, to access the https web site from Chrome only, follow these steps:

Add Site Binding
Chrome

To access the https web site from Edge and/or Firefox (and Chrome), continue to Export Certificate

Export Certificate

In Internet Information Services (IIS) Manager, open the Server Certificates for the server and you should see your newly created self-signed certificate.

Click View, then Copy to File... in the Details tab:

Click Next on the welcome screen:

Select whether to export the private key with the certificate:

Select the export file format:

Select the location for the file and specify the file name:

Click Next to confirm the file name and location:

Review the details and click Finish to export:

You should now see the 'export was successful' message:

Install Certificate

In Windows Explorer, locate the file created by the Export Wizard, right-click on the file and select Properties:

On the welcome screen, select the store location and click Next:

In the certificate store screen, click Browse... and select Trusted Root Certification Authorities, then click OK and Next:

Confirm the certificate store location and click Next:

Review the settings and click Finish:

You should now see the 'import was successful' message:

Add Site Binding

In Internet Information Services (IIS) Manager select the web site and click Bindings, then click Add... to create a new https binding or Edit... to modify an existing one: